Methods and systems for a digital trust architecture

Patent metadata

Field	Value
Publication number	US-2024313968-A1
Application number	US-202418670428-A
Country	US
Kind code	A1
Filing date	May 21, 2024
Priority date	Sep 20, 2016
Publication date	Sep 19, 2024
Grant date	—

Abstract

In some aspects, methods and systems for a digital trust architecture are provided. In some aspects, the architecture includes a user account provisioning process. The provisioning process may make use of in person verifications of some personal information to ensure authenticity of the user information. Once the authenticity of user information is established, an account may be created. The user account may include a user email account, with integrated access to digital certificates linked to the user account. Account creation may also automatically publish the new user's public key in a publicly accessible directory, enabling encrypted email information to be easily sent to the new user.

First claim

What is claimed is:

1 . A digital trust architecture comprising:
one or more processors configured to:
search a public directory for a public key associated with a recipient;
encrypt electronic data with the public key associated with the recipient;
receive the electronic data signed using a private key of a sender;
transmit a digital token containing contents of the electronic data over a network to one or more blockchains; and
convey the electronic data over the network to the recipient.

2 . The digital trust architecture of claim 1 , wherein the one or more processors are configured to sign the encrypted electronic data is configured using the private key of the sender.

3 . The digital trust architecture of claim 1 , wherein the one or more processors are further configured create the digital token based on the contents of the signed electronic data.

4 . The digital trust architecture of claim 1 , wherein the encrypted electronic data is decryptable by a private key of the recipient.

5 . The digital trust architecture of claim 1 , wherein the encrypted electronic data is decryptable using a public key of a sender and wherein successful decryption of the electronic data using the public key of the sender verifies that the electronic data is from the sender.

6 . The digital trust architecture of claim 1 , wherein the public directory includes digital certificates for recipients and senders, the digital certificates comprising public keys for the recipients and senders.

7 . The digital trust architecture of claim 6 , wherein the public directory comprises recipient and sender accounts for the recipients and senders and the digital certificates, and wherein the recipient and sender accounts are configurable to selectively searchable by the one or more processors.

8 . The digital trust architecture of claim 1 , wherein the one or more processors are configured to search the public directory using a recipient identifier.

9 . The digital trust architecture of claim 8 , wherein the recipient identifier comprises a recipient email address.

10 . The digital trust architecture of claim 1 , wherein the one or more processors are further configured to create a digital token for the signed electronic data.

11 . A method of secure electronic data transfer, the method comprising:
searching a public directory for a public key associated with a recipient; encrypting electronic data with the public key associated with the recipient; receiving the electronic data signed using a private key of a sender; transmitting a digital token containing the electronic data over a network to one or more blockchain; and conveying the electronic data over the network to the recipient.

12 . The method of claim 11 , further comprising signing the encrypted electronic data is configured using the private key of the sender.

13 . The method of claim 11 , further comprising creating the digital token based on the contents of the signed electronic data.

14 . The method of claim 11 , wherein the encrypted electronic data is configured to be decrypted by a private key of the recipient.

15 . The method of claim 11 , wherein the encrypted electronic data is configured to be decrypted using a public key of a sender, wherein successful decryption of the electronic data using the public key of the sender verifies that the electronic data is from the sender.

16 . The method of claim 11 , wherein the public directory contains digital certificates for recipients and senders, and wherein the digital certificates comprise public keys for the recipients and senders.

17 . The method of claim 16 , wherein the public directory comprises recipient and sender accounts for the recipients and senders and the digital certificates.

18 . The method of claim 11 , further comprising searching the public directory using a recipient identifier.

19 . The method of claim 18 , wherein the recipient identifier comprises a recipient email address.

20 . The method of claim 11 , further comprising creating a digital token for the signed electronic data.

Assignees

• United States Postal Service

Inventors

• Bonnell Clayton C

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/0442

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title